BADGERSEC SHELL v1.4.0

ADDR: 192.168.1.137 // INTRUDER_LOG: ACTIVE

Loading Core Suite0%

SECURE_MENU // ACCESS_GRANTED

Anudit Khatri (Lazzy Badger) — Cybersecurity Researcher, AI Systems Architect & Fullstack DeveloperLazzy Badger

Fullstack Developer, Cybersecurity Researcher, Systems Architect, and Deep Technical Hunter actively securing client ecosystems and researching upstream vulnerabilities.

NODE: badger-node-pi4

SYS_TELEMETRY: ACTIVE

CPU TEMP48.2°C

MEM LOAD2.38 GB

NIC STATEwlan0mon

ACTIVE EXPLOIT & SCAN TELEMETRY240 PKTS/S

>>

[DataCamp] Code for Nepal #1 Leaderboard // 66-Days Challenge Completer

>>

[Research] WordPress SQLite issue #568: LIKE to GLOB query distortion disclosed

>>

[SecOps] Active client security: Manoranjan, aitrialnp, and Anushka secured

NODE_ACTIVE

STATUS:VERIFIED

SECURITY_OPERATIONS

CORE_NODE

remember the name

Anudit Khatri

A passionately curious mind.

about

Built around curiosity, automation, and local-first systems.

A personal technical portfolio focused on clients.

I am a Fullstack Developer, Advanced Systems Builder, and Cybersecurity Researcher driven by deep technical inquiry and automated efficiency. I maintain active participation in client infrastructure security—providing continuous vulnerability triage, edge-level runtime hardening (mitigating Node.js CVE-2026-111497 Brotli RCE & Next.js 16.4.3 security updates), and verified zero-vulnerability postures for production client applications. Beyond client systems, I am deeply active in bug hunting and upstream open-source core research, uncovering subtle parser differentials and query translation flaws in major ecosystems (such as WordPress Core's SQLite database integration). My work spans systems programming, low-level database internals, AI orchestration, local LLM tooling, and wireless network security using Python, Rust, Linux environments, and autonomous agent workflows.

CORE MODULE // 01Active

Local LLM Orchestration

SEC_CLASS: LEVEL_4SYS_STATUS: OK

CORE MODULE // 02Active

Computer Algorithms & Architectures

SEC_CLASS: LEVEL_4SYS_STATUS: OK

CORE MODULE // 03Active

Cybersecurity Research

SEC_CLASS: LEVEL_4SYS_STATUS: OK

CORE MODULE // 04Active

Fullstack Development

SEC_CLASS: LEVEL_4SYS_STATUS: OK

CORE MODULE // 05Active

Mobile Ecosystems

SEC_CLASS: LEVEL_4SYS_STATUS: OK

CORE MODULE // 06Active

Forensic Analysis

SEC_CLASS: LEVEL_4SYS_STATUS: OK

INTELLIGENCE BRIEFING // RESEARCH & DEFENSE

Active Client Security & Upstream Bug Hunting

Client Perimeter: 100% AuditedUpstream Research: Disclosed

01 // PRODUCTION CLIENT DEFENSERUNTIME_HARDENING

Hands-on Client Infrastructure & Zero-Day Mitigation

Proactive participation in client security across production environments (Manoranjan Ramjham, AI Trial Nepal, Ar. Anushka Khatri). Rapid triage of zero-day runtime disclosures—including the recent Node.js Brotli RCE (CVE-2026-111497 / Node2Shell) and Next.js 16.4.3 security patches—maintaining a verified zero-vulnerability audit standard.

02 // UPSTREAM SECURITY RESEARCHPARSER_DIFFERENTIALS

WordPress SQLite Core Query Translation Flaw (Issue #568)

Deep architectural bug hunting in WordPress/sqlite-database-integration. Identified a subtle SQL-to-GLOB query mis-translation flaw where unescaped [ characters turn into SQLite character-class brackets, producing silent false-positive and false-negative row mismatches against MySQL LIKE.

View GitHub Issue #568↗

TARGET: WordPress/sqlite-database-integration #568

WordPress SQLite Database Integration Issue #568 Disclosure by arthurrgg8-lgtm

DISCLOSED BY: arthurrgg8-lgtm (LazZy)GITHUB_ADVISORY ↗

Languages

DB_CLUSTER_READY

RustPythonTypeScriptJavaScriptNext.jsReactTailwind CSSBash / Shell

Bug Bounty Stack

DB_CLUSTER_READY

HackerOneBugcrowdBurp SuiteNucleiNuclei TemplatesSQLMapArjunGitDumperBettercapFluxionWifitePacket MonitoringAttack Surface MappingWireless Analysis

MCP + AI Infra

DB_CLUSTER_READY

MCP ServersKali MCP ServerCodex MCP ToolingLocal Tool ConnectorsTerminal Automation AgentsShell-Command WorkflowsContext-Aware File OperationsLocal AI Orchestration

Tools + Systems

DB_CLUSTER_READY

h1watchhunt-workspaceiforensic (iOS)aforensic (Android)Easy PatraRTSP StreamingSelf-Hosted NVRFFmpegHomelab ServerRaspberry PiRalink 3070LinuxUbuntuStreamlitCodexGemini CLIDeepSeekClaudeOllamaLocal LLM EndpointsCLI AgentsCron JobsTerminal MultiplexersFile WatchersAndroid APK ToolingiOS Shortcuts

Traits

DB_CLUSTER_READY

Deep Upstream Research & Bug HuntingActive Client Security DefenseDeterminedSuperhuman CuriositySystems ThinkingAutomation-First Mindset

Certifications

DB_CLUSTER_READY

🏆 #1 Rank - DataCamp / Code for Nepal All-Time Leaderboard🔥 Code for Nepal / DataCamp 66 Days Challenge Completer (#1 Rank)🏆 2nd Place - Nepal Police Hackathon 2083AI Engineer for Developers AssociatePython Data AssociateData Scientist AssociateData Engineer AssociateAI Engineer for Data Scientists AssociateData Analyst AssociateIntroduction to AI AgentsIntroduction to KubernetesIntroduction to PythonIntroduction to SQLIntroduction to RAdvanced AI-Assisted Coding for DevelopersAWS Security and Cost Management ConceptsUnderstanding Microsoft AzureAWS Cloud Practitioner (CLF-C02)Large Language Models (LLMs) ConceptsWorking with OpenAI APISoftware Development with GitHub CopilotAWS Cloud Technology & ServicesAI EthicsUnderstanding Cloud ComputingGitHub Copilot Fundamentals (GH-300)

certifications // verified_credentials

Proof of work.

HALL OF FAME // COMPETITIVE RANKINGS

DataCamp / Code for Nepal #1 Leaderboard & 66-Days Challenge Completer

🏆 #1 All-Time Rank🎓 66-Days Challenge Completer

Secured the #1 All-Time Leaderboard position in the prestigious Code for Nepal × DataCamp community initiative and successfully completed the rigorous 66-Days Continuous Learning Challenge with verified data science and AI associate accreditations.

VERIFIED ASSOCIATE ACCREDITATIONS

🏅AI Engineer for Developers Associate🏅Python Data Associate🏅Data Scientist Associate🏅Data Engineer Associate🏅AI Engineer for Data Scientists Associate🏅Data Analyst Associate

DATACAMP // LIVE LEADERBOARD VERIFICATION

DataCamp Code for Nepal All Time #1 Leaderboard and 66 Days Challenge Completer - LazZy Badger

HANDLE: LazZy BadgerRANK: #1 ALL-TIME LEADERBOARD

AI Engineer for Developers Associate

AI Ethics

AI-Assisted Coding for Developers

Advanced AI-Assisted Coding for Developers

CERT // 05Cloud

AWS Cloud Practitioner (CLF-C02)

CERT // 06Cloud

AWS Cloud Technology & Services

CERT // 07Cloud

AWS Concepts

CERT // 08Cloud

AWS Security and Cost Management Concepts

CERT // 09Cloud

Understanding Cloud Computing

CERT // 10Cloud

Understanding Microsoft Azure

CERT // 11DevTools

GitHub Copilot Fundamentals (GH-300)

CERT // 12DevTools

Software Development with GitHub Copilot

Intro to AI for Work

Large Language Models (LLMs) Concepts

Working with OpenAI API

Introduction to AI Agents

CERT // 17Cloud

Introduction to Kubernetes

CERT // 18DevTools

Introduction to Python

CERT // 19DevTools

Introduction to SQL

CERT // 20DevTools

Introduction to R

projects

Systems with teeth.

CUSTOM TOOLING ARSENAL // OFFENSIVE & DFIR

High-Velocity Bug Hunting, Mobile DFIR & Civic Automation

⚡ Fast Recon Engine📱 Enterprise Mobile DFIR📄 Document Automation

01 // H1WATCH & HUNT-WORKSPACEATTACK_SURFACE_MONITORING

Real-time HackerOne Scope Watcher & Rapid Alerting

Engineered for high-velocity offensive security. Continuously monitors the HackerOne ecosystem for new programs and scope expansions, pushing instant Telegram alerts for immediate first-mover advantage. Seamlessly backed by hunt-workspace to orchestrate subfinder, katana, and custom payload sweeps.

02 // IFORENSIC & AFORENSICENTERPRISE_MOBILE_DFIR

Full-Fledged Deep Mobile Forensics (iOS & Android)

Enterprise-grade Digital Forensics and Incident Response (DFIR) tooling suites. Automates low-level artifact carving, decrypted sandbox forensics, SQLite database extractions, iOS keychain/plist inspection, and Android Dalvik memory triage for red-team auditing and mobile investigations.

03 // EASY PATRA (इजि-पत्र)CLERICAL_WORKFLOW_REDUCTION

Automated Administrative Letter Formatting & Print Engine

Designed to eliminate repetitive manual clerical drafting across Nepali corporate and governmental correspondence. Formats standardized, high-fidelity administrative letters with instant print and PDF generation, dramatically reducing human error and turnaround time.

GITHUB: arthurrgg8-lgtm // TOOLING REPOSITORIES

Active GitHub Repositories for h1watch, easy-patra, iforensic and aforensic by arthurrgg8-lgtm

AUTHOR: arthurrgg8-lgtm (LazZy)GITHUB PROFILE ↗

01BUG_HUNT

IP: github.com//PORT: 443//STATUS: ACTIVE

WordPress / SQLite Pattern Translation Research (Issue #568)

Reported

Deep upstream research & bug discovery in WordPress Core's sqlite-database-integration. Identified a subtle SQL-to-GLOB translation flaw where literal '[' characters are mis-translated into SQLite GLOB character-class brackets, producing silent false-positive and false-negative row mismatches against MySQL LIKE semantics.

WordPress CoreSQLiteMySQLPHPQuery TranslationDeep Research

repo link ↗

02SEC_OPS

IP: client-edge//PORT: 443//STATUS: ACTIVE

Active Client Security & Infrastructure Hardening

Secured

Active, hands-on participation in client security across production ecosystems (Manoranjan Ramjham, AI Trial Nepal, Ar. Anushka Khatri). Continuous CVE monitoring, rapid triage of critical runtimes (mitigating Node.js CVE-2026-111497 Brotli RCE & Next.js 16.4.3 security advisories), and edge-level hardening to guarantee a verified 0-vulnerability perimeter.

Client SecurityCVE RemediationNext.js 16 HardeningCloudflare EdgeOWASP Security

private

03RECON_CORE

IP: 127.0.0.1//PORT: 9100//STATUS: ACTIVE

h1watch & hunt-workspace

Active

High-velocity automated bug hunting and attack surface monitoring engine. 'h1watch' monitors the HackerOne platform for newly launched programs and scope asset expansions in real time, firing instant Telegram alerts for rapid first-mover advantage. Backed by 'hunt-workspace', an orchestrated recon environment integrating subfinder, katana, and custom toolkits.

PythonHackerOne APITelegram Bot APIRecon AutomationAttack Surface Mapping

repo link ↗

04MOBILE_DFIR

IP: forensic-box//PORT: 5037//STATUS: ACTIVE

iforensic & aforensic (Mobile DFIR)

Open Source

Enterprise-grade deep mobile forensic engineering suites for iOS (iforensic) and Android (aforensic). Automates low-level artifact acquisition, SQLite forensic extraction, decrypted application sandbox inspection, plist/XML parsing, live memory dumps, and mobile red-team auditing.

PythoniOS ForensicsAndroid DFIRSQLite ExtractionReverse EngineeringMobile Security

repo link ↗

05DOC_AUTO

IP: 127.0.0.1//PORT: 3005//STATUS: ACTIVE

Easy Patra (इजि-पत्र)

Active

Automated official letter formatting, templating, and high-fidelity print generation platform designed to eliminate tedious manual clerical work in administrative and legal correspondence across Nepal, featuring standardized letterhead layouts and instant export.

TypeScriptNext.jsReactDocument AutomationTailwind CSS

repo link ↗

06LORA_MESH

IP: 127.0.0.1//PORT: 3001//STATUS: ACTIVE

Prahari-Link (प्रहरी-Link)

2nd Place

🏆 2nd Place Winner, Government Led First Hackathon 2083 by Nepal Police. An emergency communication bridge linking remote communities in Nepal with command centers via LoRa/ESP-NOW and offline Bluetooth telemetry.

Next.jsReact NativeExpressESP32 C++ESP-NOWBLE

repo link ↗

07LIVE_SYS

IP: aitrialnp.com//PORT: 443//STATUS: ACTIVE

AI Trial Nepal (aitrialnp.com)

Live

An elite, high-performance virtual try-on software suite tailored for boutique retailers and modern designers in Nepal. Features a serverless Cloudflare Worker API, PostgreSQL database triggers, real-time shared capture-sessions, and high-fidelity clothing draping pipelines.

Next.jsCloudflare WorkersSupabasePostgreSQLR2 StorageGemini Vision

live site ↗

08LIVE_SYS

IP: manoranjan.com.np//PORT: 443//STATUS: ACTIVE

MR Tour Service

Live

A premium, high-performance travel booking and service management platform crafted for modern tour operators.

Next.jsReactPostgreSQLTailwind CSS

live site ↗

09LIVE_SYS

IP: anushkakhatri.com.np//PORT: 443//STATUS: ACTIVE

Ar. Anushka Khatri Portfolio

Live

An elite, interactive architectural portfolio drafted around custom blueprint watermarks, a dynamic CAD slider, and a physical-media material flat-lay system.

Next.jsTailwind CSS 4Framer MotionCloudflare Workers

live site ↗

10DEV_PORT

IP: bhoteykukur.com.np//PORT: 8080//STATUS: ACTIVE

Himalayan Mastiff Nepal

In Development

A premium, cinematic full-stack portal (Bhotey Kukur) showcasing champion bloodlines, featuring a FastAPI backend, optimized Next.js 16 frontend, and dynamic eSewa puppy reservation system.

Next.js 16React 19FastAPITailwind CSS 4eSewa

private

11TARGET

IP: unknown//PORT: 80//STATUS: ACTIVE

VastuVision AI

Live

A premium, modern hybrid web dashboard and native Android application designed to analyze home layouts and furniture placements against Vastu Shastra rules using local direction sensors and AI vision mapping.

Python ServerlessKotlinCameraXHTML5Vanilla CSSJavaScriptGroq AI

live site ↗

12LOCAL_CORE

IP: 127.0.0.1//PORT: 9090//STATUS: ACTIVE

Lazzybiointel-v6.2-PRO

active

Forensic-grade biometric identity verification system built with Python, InsightFace, and MediaPipe for advanced facial recognition and geometry tracking.

PythonInsightFaceMediaPipeOpenCV

private

13LOCAL_CORE

IP: 127.0.0.1//PORT: 8000//STATUS: ACTIVE

Deepfake-Analyzer

active

Offline privacy-first deepfake detection workbench using Rust and Python hybrid architecture.

RustPythonPyTorchOffline-First

private

14RTSP_NVR

IP: 192.168.1.150//PORT: 554//STATUS: ACTIVE

Autonomous RTSP Camera & 7-Day Cloud NVR

Active

Self-engineered 24/7 continuous event surveillance and NVR system built from scratch on a repurposed Linux laptop homelab server. Ingests low-latency RTSP camera streams, records continuous event clips, and executes automated rolling 7-day backups directly to cloud drive storage with zero third-party subscription dependencies.

RTSP StreamLinux HomelabFFmpegCloud Storage SyncBash AutomationEdge NVRHardware Hacking

private

15NODE_SSH

IP: 192.168.1.137//PORT: 22//STATUS: ACTIVE

Hardware-Driven Network & Motion Sensing Node

active

Raspberry Pi 4 and Ralink 3070-based sensing and packet monitoring node for low-level wireless network analysis and packet injection.

Raspberry Pi 4Ralink 3070BashLinuxMonitor Mode

private

16DEV_PORT

IP: 192.168.1.104//PORT: 3000//STATUS: ACTIVE

Cafe Billing System

Operational billing and reporting application for local service operations.

FastAPIReactSQLiteTailwind CSS

repo link ↗

17SEC_TUNNEL

IP: 10.0.0.82//PORT: 8443//STATUS: ACTIVE

Confidential Project I

Details omitted for security.

Systems SecurityDoD Scopes

private

18SEC_TUNNEL

IP: 10.0.0.95//PORT: 8000//STATUS: ACTIVE

Confidential Project II

Details omitted for security.

GraphQL AnalysisNext.js Auditing

private

gallery // field_intel

MEMORIES

Helmeted rider on a dirt bike at night in a city street

LAT: 27.7172° N // LNG: 85.3240° E

INTEL_LOG // 01

Night ride

Helmeted rider in fog on an off-road motorcycle

LAT: 27.6815° N // LNG: 85.3182° E

INTEL_LOG // 02

ZONTES350 T

Cinematic outdoor frame with a rider and hard shadows

LAT: 27.8105° N // LNG: 85.2917° E

INTEL_LOG // 03

NATURE

Personal cinematic outdoor image

LAT: 28.0264° N // LNG: 85.7104° E

INTEL_LOG // 04

PANCHPOKHARI

Outdoor portrait in a scenic location

LAT: 27.7028° N // LNG: 85.3195° E

INTEL_LOG // 05

CHILLINN

Urban rooftop perspective

LAT: 27.6384° N // LNG: 85.4290° E

INTEL_LOG // 06

PILOT BABA ASHRAM RUNNING

Group of riders with dirt bikes on a trail

LAT: 27.7408° N // LNG: 85.3325° E

INTEL_LOG // 07

SQUAD

Group photo on a staircase

LAT: 27.6890° N // LNG: 85.3204° E

INTEL_LOG // 08

COLLEGE SQUAD

badger@sec-shell:~$ ping -c 3 google.com

badger@sec-shell:~$ initiate secure_handshake --port 8443

STATUS: ESTABLISHED // CHANNEL: SECURE

connect // secure_handshake

Build less by hand.
Build more with systems.
Else if Build your own System.